cordoba.gov.co
HTML metadata
Technology
- Server
- nginx
- jQuery
- 3.1.0 known XSS (<3.5)
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- translate.google.com×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns-cloud-b1.googledomains.com
- ns-cloud-b2.googledomains.com
- ns-cloud-b3.googledomains.com
- ns-cloud-b4.googledomains.com
- MX
-
- 0 telefonicatech-co-1.fortimailcloud.com
- 1 telefonicatech-co-2.fortimailcloud.com
- 2 cordoba-gov-co.mail.protection.outlook.com
- 3 cordoba-gov-co.mail.eo.outlook.com
- TXT
-
MDAyMzc0NjRjb3Jkb2Jh
Email authentication weak
- SPF
-
v=spf1 include:spf.protection.outlook.com include:_spf.fortimailcloud.com ~allsoftfail (~all) - DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 136 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin- x-frame-options
SAMEORIGIN- permissions-policy
geolocation=(), midi=(), sync-xhr=(self 'https://www.municipiodeguatape.gov.co' 'https://tramites.alcaldiadeipiales.gov.co' 'https://www.acacias.gov.co' 'https://santander.gov.co' 'https://tramites.alcaldiadesanantero.gov.co' 'https://tramitesenlineazipaquira.gov.co' 'https://sede.alcaldiadesanrafael.gov.co' 'https://tramites.pasto.gov.co' 'https://gfiles-zipaquira.gov.co' 'https://pasaportes.cordoba.gov.co' 'https://pasaportes.risaralda.gov.co' 'https://pasaportescaqueta.gov.co' 'https://sede.idsn.gov.co' 'https://www.barrancabermeja.gov.co' 'https://www.cordoba.gov.co' 'https://www.tramites-inza.gov.co' 'https://www.pereira.gov.co' 'https://tramites.popayan.gov.co' 'https://pasaportesatlantico.gov.co' 'https://pasaportes.cordoba.gov.co' 'https://creg.gov.co' 'https://tramites-tocancipa.gov.co' 'https://www.apartado-antioquia.gov.co' 'https://www.tramites-angostura.gov.co' 'https://www.alcaldiadepiedecuesta.gov.co' 'https://www.candelaria-valle.gov.co' 'https://www.sanpedrodelosmilagr- x-content-type-options
nosniff- content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: javascript: https://api.onesignal.com/ https://d1sag09wwfbul8.cloudfront.net/ https://tracker.metricool.com/ https://cdn.onesignal.com/ https://gso.kommo.com/ https://widgets.sociablekit.com/ https://googleads.g.doubleclick.net/ https://www.instagram.com/ https://www.twitter.com/ https://x.com/ https://syndication.twitter.com/ https://coomeva.com.co/ https://cdn.userway.org/ https://alcaldiatulua.agenti.com.co/agenti_lite_alcaldiatulua/js/jquery-3.7.1.min.js https://alcaldiatulua.agenti.com.co/agenti_lite_alcaldiatulua/js/scripts.js alcaldiatulua.agenti.com.co https://cdn.siftscience.com alcaldiapereira.agenti.com.co https://checkout.wompi.co/widget.js wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app widget02.wolkvox.com d335luupugsy2.cloudfront.net wolkvox-cobrowsing-agent-fd5zvw7swa-ue.a.run.app https://platform.bluemessaging.net app.sitp.gov.co *.firebaseio.com *.aldeamo.com *.bootstrapcdn.com *.cloudflare.com https://chat1-cls27- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (20)
- aguasdecordoba.gov.co×1
- codecticordoba.com×1
- cordobacolombia.com×1
- cordobacompetitiva.com×1
- dev-strategy.com×1
- empresaspublicasmunicipalesdesanpelayo.gov.co×1
- esecamu-sanpelayo-cordoba.gov.co×1
- facebook.com×1
- funcionpublica.gov.co×1
- iesantateresitapuertolibertador.edu.co×1
- indeportescordoba.gov.co×1
- instagram.com×1
- mininterior.gov.co×1
- nexura.com×1
- office.com×1
- presidencia.gov.co×1
- sispro.gov.co×1
- twitter.com×1
- www.gov.co×1
- youtube.com×1